Vendor/product archive

eclipse / cyclone_data_distribution_service CVEs

Beta · best-effort

4 CVEs tagged to eclipse / cyclone_data_distribution_service — 1 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to eclipse vendor archive

CVE-2025-67109

Published Dec 23, 2025

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-10838

Published Mar 12, 2025

An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers revealing the layout…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2020-18735

Published Aug 23, 2021

A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2020-18734

Published Aug 23, 2021

A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1